Live data from Hacker News

Private keys used to sign EU Digital Covid Certificate might have been leaked

nitter.net

181–190 of 214 posts

Re: Private keys used to sign EU Digital Covid Certificate might have been leaked

#181

Earlier quoted context omitted.

> you need a driver's license to prove skill Just like you need a vaccine certificate to prove vaccination :) > Leaving your country and working (in your country) are rights Says who? Who defines those rights? > these things are now illegal but have never been: [...] > In Romania you're not allowed to go outside without a mask and you're not allowed to go outside at night AT ALL if you're not vaccinated. Ceausescu de…

> > Leaving your country and working (in your country) are rights > Says who? Who defines those rights? UN Universal Declaration of Human Rights. > > Australia doesn't allow you to leave the country even if you have a passport > Australia literally was a prison colony. You know, prisons, the things where people can't leave? Ok, I'm now fairly confident you're just trolling.

> Ok, I'm now fairly confident you're just trolling.

Why would you think I'm trolling? I demonstrated both examples you gave were invalid and all you did was try to derail the conversation.

Re: Private keys used to sign EU Digital Covid Certificate might have been leaked

#182

Earlier quoted context omitted.

That talking point completely ignores the dynamics of infectious disease.

Wait what? I mean, seriously either 1) you believe the vaccine works: in that case YOU are safe if you're vaccinated, regardless of others. 2) you believe the vaccine doesn't work: it doesn't matter. So ... what? You don't believe either of those?

The reality is neither of those. The vaccine works, but not perfectly. As such, the protection is the product of the protections of everyone you come in contact with.

Re: Private keys used to sign EU Digital Covid Certificate might have been leaked

#183

Earlier quoted context omitted.

> 60 to 70 percent threshold that Fauci and other public servants claimed as the target over the last year. That number changed because the delta variant is far more infectious now. It's closer to 90 %. But you already knew that, which is why you mentioned the time frame of those statements. If I know that you're making disingenuous arguments, and you know that you're making disingenuous arguments, the healthy reacti…

Your response is very emotional. I didn't think that the facts in the arguments you replied to were disingenuous or schizophrenic. Headlines often are fear-mongering. Politicians are not always following the science. There's a lot of research and data to look at, and not all pointing consistently in the same direction as some might believe. Things like mask effectiveness compared to ventilation and isolation, the fat…

[deleted]

Re: Private keys used to sign EU Digital Covid Certificate might have been leaked

#184

Earlier quoted context omitted.

That talking point completely ignores the dynamics of infectious disease.

So do the COVID vaccine mandates, frankly. Relatively short lived (~months) protection against infection, which itself comes at the cost of encouraging vaccine escape variants to become the dominant strain. Furthermore while protection against infection/transmission wanes incredibly quickly compared to natural immunity, the protection against severe disease/hospitalization does much less so. Therefore it is quite sil…

There are so many half truths in your arguments it would take far too long to refute them all. It’s hard to believe you’re not acting in bad faith, either that or completely indulging your confirmation biases.

Re: Private keys used to sign EU Digital Covid Certificate might have been leaked

#185

Earlier quoted context omitted.

That talking point completely ignores the dynamics of infectious disease.

Wait what? I mean, seriously either 1) you believe the vaccine works: in that case YOU are safe if you're vaccinated, regardless of others. 2) you believe the vaccine doesn't work: it doesn't matter. So ... what? You don't believe either of those?

Almost no vaccines work that way. They’re not magic shields.

In reality protection is slightly variable depending on a host of factors including age & immune response, but on a _population_ level they work to bring the disease under control.

The polio vaccine ended that disease’s existence in most of the world, but it’s not perfect. If you’re vaccinated with the regular schedule and go to a polio-endemic area you may still get it. That’s why people who may be exposed to it in places where it’s endemic or in labs need additional booster shots according to CDC guidelines.

Re: Private keys used to sign EU Digital Covid Certificate might have been leaked

#186

Earlier quoted context omitted.

That talking point completely ignores the dynamics of infectious disease.

So do the COVID vaccine mandates, frankly. Relatively short lived (~months) protection against infection, which itself comes at the cost of encouraging vaccine escape variants to become the dominant strain. Furthermore while protection against infection/transmission wanes incredibly quickly compared to natural immunity, the protection against severe disease/hospitalization does much less so. Therefore it is quite sil…

[deleted]

Re: Private keys used to sign EU Digital Covid Certificate might have been leaked

#187

Seems the keys have already been revoked. Doesn't mean it can't leak again, but doesn't seem to be a problem with a leaked key at the moment. Actual source seems to be here: https://rfmirror.com/Thread-TRADING-make-EU-green-pass?page=...

Maybe, but I installed the Scottish validation app a couple of minutes ago and it's still coming up green.

You using the EU system in Scotland? Good for you guys :)

Re: Private keys used to sign EU Digital Covid Certificate might have been leaked

#188
post #48

Earlier quoted context omitted.

At least in UK the app will generate a new certificate on the fly.

It's definitely a solution when you have an app (assuming you have a 3rd party source of identification of users), but since it's a French key, a sizeable portion of people, mostly elderly, are not using the "official" app but a paper printed QR code that was given to them at the time of the second injection (or a picture of said code). Since the French app is pretty terrible (it used to be the barely functional cont…

I was on holiday in France and imported my Irish code to the French app. Found it real easy to use.

Re: Private keys used to sign EU Digital Covid Certificate might have been leaked

#189
post #48

Earlier quoted context omitted.

It's definitely a solution when you have an app (assuming you have a 3rd party source of identification of users), but since it's a French key, a sizeable portion of people, mostly elderly, are not using the "official" app but a paper printed QR code that was given to them at the time of the second injection (or a picture of said code). Since the French app is pretty terrible (it used to be the barely functional cont…

Does carrying just a QR code work fine for you? My experience from Germany is that nobody scans the code, they just scroll to details to see there's two vaccinations recorded. This far my QR code has only actually been scanned at the airport.

In France it was scanned a lot when I was there in August.

In Ireland it’s hit and miss. About 60% of the time had to produce it, but very few places want to see ID as well, which is needed to prevent people just using someone else’s pass.

I’m all for it so I’d love to see better enforcement.

Re: Private keys used to sign EU Digital Covid Certificate might have been leaked

#190
post #81

Earlier quoted context omitted.

I think that's absolutely the most likely. And it's not hundreds, it's probably more like tens of thousands (or more). For example, when I got mine issued in Germany, I just went to a pharmacy, gave them my ID and (paper) vaccination record, and the pharmacist came back in a couple of minutes with my QR code. The interesting thing to watch, over the coming days, is this: will the public policy response do the technic…

I am not sure how the key management works, maybe they are just issuing private keys to each pharmacy, and if any pharmacy just went rogue, it should be extremely easy to know which one the certificate is coming from. Also, it is easy to get a valid vaccination code anyways, for example, I took a friend of mine, who was vaccinated out of EU, to a pharmacy and nicely asked if he can have a certificate for travel. They…

At least for my (Irish) pass the cert is signed by the Irish Health service.

So I expect each country’s national health service has been issued a key. But what mechanism for revocation might be there I’ve no idea.

Post reply on HN